$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa File: zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa (raw, json) Hash identifier: +8d5zc00cEnm1cPuT2Sfzdn3yyFWkuO+SVLJ35tb1RY= Subject key identifier: CC:31:8D:A3:86:11:BC:15:A3:01:BF:C8:FE:8E:14:24:14:8D:45:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0592 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa Signing time: Thu 27 Jul 2023 16:58:17 +0000 ROA not before: Thu 27 Jul 2023 16:58:17 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:58:17 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=CC318DA38611BC15A301BFC8FE8E1424148D45C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:be:6a:1e:be:c7:2b:ff:00:48:9a:b1:31: 50:48:61:60:a2:d3:e2:b4:a7:70:ce:20:ef:87:dc: 68:15:82:f1:4e:eb:42:b7:f2:93:1f:63:c4:36:65: 4c:77:9d:fb:80:a9:12:14:14:bb:b0:14:fc:c2:38: bc:48:25:66:ae:34:74:0a:04:e9:b5:f3:87:f6:72: c3:b4:2f:26:52:cc:0f:ad:da:e8:cc:d3:2b:94:cf: 08:c4:b2:2f:21:77:a8:58:96:b8:a6:6a:79:e9:e1: 31:cf:73:4e:3a:a6:63:02:94:8a:47:96:f5:e0:4a: df:96:e8:4f:84:f1:bb:82:af:45:73:6d:0f:fd:44: 18:92:21:c2:d7:86:18:68:05:c2:ca:32:49:26:53: 3a:7f:ff:a6:e1:2f:7b:3c:2a:1b:fa:db:02:f2:71: f7:d2:2f:47:5a:11:91:e6:92:5c:6f:b2:69:38:5a: b5:ce:cd:af:fa:7a:d2:9a:a5:52:f9:fb:58:64:21: 0c:9d:4f:21:d3:95:d2:dc:99:80:71:f0:db:8d:41: 2e:24:83:a9:05:96:0d:df:62:34:ff:96:90:77:b9: 37:c9:8c:0f:69:1e:81:1a:3f:b3:a4:d7:7e:87:12: 97:18:7e:f5:9a:d3:05:9c:f2:55:c4:1f:f9:f9:2f: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:31:8D:A3:86:11:BC:15:A3:01:BF:C8:FE:8E:14:24:14:8D:45:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zDGNo4YRvBWjAb_I_o4UJBSNRcQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.248.0/21 Signature Algorithm: sha256WithRSAEncryption 92:8b:f1:98:f1:17:a0:21:ed:16:90:8b:34:58:da:32:26:d9: b0:4b:15:74:de:8e:94:ca:43:06:9b:a4:c1:c3:37:fb:f1:75: 18:37:a0:6a:0c:b3:96:8e:fc:73:fe:19:2a:80:d8:5a:24:1b: 2b:41:a4:0f:be:51:dd:ed:46:5f:f4:86:47:b8:3d:ad:c6:5a: 25:c8:97:53:4d:3a:67:b3:19:f0:e1:4a:ac:a9:22:e8:0e:9a: 42:b4:6d:ea:db:26:c0:fb:10:38:f3:cc:ad:a2:67:aa:ac:d8: 6f:e0:e2:5f:7d:79:c7:23:71:2b:5d:79:3d:f0:ac:d5:71:36: 17:f2:49:67:ae:a8:4f:e3:6e:66:b7:61:c8:7c:28:94:0d:8b: 86:8b:36:2a:12:16:57:a8:de:57:ed:3f:b5:92:23:f2:7d:5e: ec:d3:06:5e:12:46:3a:48:2e:2b:5c:e7:28:80:78:2f:d2:6c: 4b:de:f2:9b:b5:df:88:aa:5e:91:88:00:65:88:d6:4f:90:b4: 83:ee:db:0d:18:d3:87:40:83:98:17:ea:ce:f0:69:31:54:6a: cf:6d:2c:9f:36:27:a0:81:e9:77:b0:6c:89:53:00:eb:e4:cc: 50:6d:22:77:6a:41:c5:43:3d:8e:d2:b1:52:ee:6d:61:78:2e: 42:c4:62:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU4MTdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKENDMzE4REEzODYxMUJD MTVBMzAxQkZDOEZFOEUxNDI0MTQ4RDQ1QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKXL5qHr7HK/8ASJqxMVBIYWCi0+K0p3DOIO+H3GgVgvFO60K3 8pMfY8Q2ZUx3nfuAqRIUFLuwFPzCOLxIJWauNHQKBOm184f2csO0LyZSzA+t2ujM 0yuUzwjEsi8hd6hYlrimannp4THPc046pmMClIpHlvXgSt+W6E+E8buCr0VzbQ/9 RBiSIcLXhhhoBcLKMkkmUzp//6bhL3s8Khv62wLycffSL0daEZHmklxvsmk4WrXO za/6etKapVL5+1hkIQydTyHTldLcmYBx8NuNQS4kg6kFlg3fYjT/lpB3uTfJjA9p HoEaP7Ok136HEpcYfvWa0wWc8lXEH/n5L9KTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzDGNo4YRvBWjAb/I/o4UJBSNRcQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3pER05vNFlSdkJXakFiX0lfbzRVSkJTTlJjUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQ/gwDQYJKoZIhvcNAQELBQADggEBAJKL8ZjxF6Ah7RaQizRY2jIm2bBL FXTejpTKQwabpMHDN/vxdRg3oGoMs5aO/HP+GSqA2FokGytBpA++Ud3tRl/0hke4 Pa3GWiXIl1NNOmezGfDhSqypIugOmkK0berbJsD7EDjzzK2iZ6qs2G/g4l99eccj cStdeT3wrNVxNhfySWeuqE/jbma3Ych8KJQNi4aLNioSFleo3lftP7WSI/J9XuzT Bl4SRjpILitc5yiAeC/SbEve8pu134iqXpGIAGWI1k+QtIPu2w0Y04dAg5gX6s7w aTFUas9tLJ82J6CB6XewbIlTAOvkzFBtIndqQcVDPY7SsVLubWF4LkLEYhA= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:26 2024 by rpki-client on console.sobornost.net